Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
File:                     V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json)
Hash identifier:          XpWP8e1uKGfOBTUhzGpcMdmg0MTOwiPFi4/lhBz28uk=
Subject key identifier:   5F:0C:BE:7A:23:FF:AE:A0:8C:81:FB:9F:4D:87:52:81:BD:97:D5:B6
Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Certificate issuer:       /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
Manifest number:          05F4
Signing time:             Sun 24 Nov 2024 14:46:26 +0000
Manifest this update:     Sun 24 Nov 2024 14:46:26 +0000
Manifest next update:     Sun 01 Dec 2024 14:46:26 +0000
Files and hashes:         1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: Lw1fRHBtpK77ScjYxPhkTF63pf7M/G9fvmV6vkcYVK0=)
                          2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: ZPd0b5pncSqHwdSF6B6PNBDvF8PT+k9dwuzN/M5HIvU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
        Validity
            Not Before: Nov 24 14:46:26 2024 GMT
            Not After : Dec  1 14:46:26 2024 GMT
        Subject: CN=67433c42-ef1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:0a:15:41:0e:26:ef:1a:7b:0f:e0:5f:9b:
                    d0:9d:de:6e:88:b6:51:ab:24:37:c9:5c:f6:26:80:
                    12:54:93:fc:9a:64:01:f5:b3:e6:32:11:a6:e2:18:
                    56:df:be:e9:d2:34:8b:e1:d7:5e:6a:80:0a:dd:8b:
                    53:1b:9d:c6:0f:cf:a5:74:26:5f:61:84:d6:07:f1:
                    57:e7:50:fc:16:30:d2:ba:66:a7:ae:8a:d4:d1:09:
                    2b:3e:db:dd:34:0d:74:83:12:79:71:33:cc:c8:ea:
                    68:8b:fc:fa:69:b0:00:23:0e:cb:0a:a3:4a:b0:61:
                    d8:0c:21:4d:15:0f:3e:8c:f3:30:f9:98:12:6b:f7:
                    bd:71:66:62:7a:a8:a3:f9:3b:13:50:63:ec:45:3f:
                    96:61:62:21:8d:56:99:ad:a8:5a:18:e8:07:e8:c4:
                    1d:b0:68:56:5c:5d:86:7a:10:17:97:15:d3:54:1c:
                    c6:68:68:e5:9f:09:93:f5:8d:5b:b8:bb:d0:d5:1c:
                    8e:b3:38:f0:a9:01:f7:34:07:bc:4e:a1:5e:88:d3:
                    d5:89:ed:d5:f1:d9:25:13:e6:32:d1:2a:c7:3b:58:
                    d8:8d:fc:26:2c:2a:7c:4b:f1:f7:6d:07:85:37:e7:
                    6d:cd:25:8f:21:cd:d3:ba:ce:38:03:f4:12:45:ad:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0C:BE:7A:23:FF:AE:A0:8C:81:FB:9F:4D:87:52:81:BD:97:D5:B6
            X509v3 Authority Key Identifier:
                keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:43:ac:b0:2c:2b:3d:e3:0c:51:fc:53:81:50:bb:f6:eb:
         51:d6:c3:bd:e4:7c:97:4a:62:c4:2b:f4:ad:bb:0c:8b:bb:17:
         1b:31:78:bc:17:74:b4:3c:a6:59:dd:2b:07:cf:e0:f9:c5:28:
         ba:b3:9b:a6:18:e5:63:79:fb:6d:b1:0e:58:35:2d:8d:95:76:
         0f:bc:71:02:7d:56:3b:ed:17:f2:44:49:3a:63:57:b1:fb:09:
         e4:28:d6:fb:d3:23:45:c4:7c:f1:39:9d:7f:7b:dd:e8:ec:6e:
         d1:6b:d1:cc:61:2c:c4:e2:b8:a7:fb:e9:44:34:44:13:a0:67:
         e1:ca:9a:17:88:20:11:54:10:82:91:5e:09:6f:54:50:62:79:
         3a:f6:4d:84:2f:00:9b:14:ba:c2:ba:a4:a7:65:04:60:41:84:
         47:6a:e4:de:4e:de:0f:88:6f:ef:3e:c7:9b:06:0d:98:d5:10:
         79:cd:d5:62:5d:07:ca:79:8d:ac:f4:45:7b:97:83:d7:cd:a6:
         06:0a:f1:cb:d2:15:da:14:d7:4c:2d:48:d6:7f:6e:30:9e:63:
         fd:00:c5:bf:db:f7:70:1e:e9:86:50:33:a1:b5:72:01:f6:71:
         18:3b:ae:35:53:3a:5a:e1:4a:f0:47:7e:d6:75:86:67:4d:aa:
         17:20:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:08 2024 by rpki-client on console-fra.rpki-client.org